torture: Extend krb5.kdc test to confirm correct RODC proxy behaviour